Hi and welcome back to Section nine wireless attacks.
In this video,
we are going to leverage the collected interation from our reconnaissance phase
to attack a W P vulnerable network.
I hope you're excited. So let's in,
so now that we're back on Car Lenox,
let's leverage the reconnaissance information from the previous phase.
What we wanna do is collect packets from our target
network to collect pockets.
We do not need to be connected to the target network.
We simply need to be within the vicinity simply as though we are performing
reconnaissance.
But we are going to drill down and focus on the actual network
name together with the channel. So therefore,
we are going to use this command.
We are going to use adom command. We'll specify to listen on channel four.
We'll specify seek out and listen for the target on
the network.
We'll specify the wireless monitoring interface two use dash W
will specify to write a collected data to the file or files
with the name target network capture.
This will simply allow us to focus on our target network only
without changing channels. Simply by default.
Adom changes channels between one to 11 to monitor all wireless
networks and stations within vicinity by using dash C.
We are going to listen only on the 2.4 gigs,
channel number four specifically.
We are also going to look for this network, the target network,
and write the data to an output file. So I'm gonna hit enter.
Great. Notice that we are only seeing our target network,
which is target on network. We are also seeing the encryption type,
which is wp.
We can see the BS society of the network itself,
the power, the number of beacons, the data.
And if you look at the last line here,
under BS societies and station, we have one connected station.
So therefore we are capturing all pockets,
well all wireless frames that are associated with our target network.
We need to capture a lot of data,
at least 10,000 or 20,000 liter.
And if you notice that the data is increasing very slowly,
simply because there isn't much clients and even traffic being generated on our
target network. To increase the traffic flow,
we can simply perform an A R P attack.
To do this,
open another terminal and we are going to use pseudo airplay
dash. We'll use a dash three syntax to perform.
An A R P
will specify dash B and the BS society of our target
access point will specify dash H to specify a
target host device to perform the repair attack against.
So simply the repair attack will happen between the access point
and this connected client.
Remember we got the client information from performing reconnaissance like zoo,
and we'll also specify our WLAN zero monitor interface.
I'm simply going to put this window a little to the corner like zoo
and let's look at what happens. I'm going to enter,
simply enter your password like this and notice the
attack has started. The data seems to be increasing a little bit,
and eventually the client may be disconnected and try to attempt to reconnect.
We
need to leave this attack running for a long period of time
simply because we need to capture a lot of data. Also,
if you notice in a data column, it has started to increase significantly.
This means to say the client was disconnected and it reconnected.
So we need to capture a lot of this data for a long period of time.
The more data we capture simply increases the likelihood that we are able to
retrieve the W E P key for the actual target network.
Because the client was disconnected,
we can see on the probes a probe was sent looking for target on the score
network.
So I'm gonna pause the screen and leave this to run for a few minutes.
Great. So after a few minutes, as pass, as you can see,
it has captured over 100,000 messages.
So now I'm gonna stop the attack by press C
and I'll press control C.
To finish writing to the actual output file, I'm gonna type click.
Next. I'm gonna type LS dash L to take a look at the files,
our directory,
and notice that we have captured the wireless frames and it is written to a
cap File, a CSV file, kismet file, an log file.
We can use a command to perform w p
password cracking on this file. To do this,
we can type pseudo
followed by the name of the file and hit enter like Sue.
And here we go. With all of this data we have captured,
it has found the key.
We can simply copy the key and enter it when connecting to the target
nsu. But keep in mind that when enter the key,
simply remove the colons.
And this will allow us to connect to the target network and gain access to the
entire wireless network infrastructure.
During the course of this video, you have learned how to attack a W eep network.
In the next video,
you'll discover how to attack WPA and WPA to wireless
networks. I hope this video has been informative for you.
And thank you for viewing.